What’s Vulnerable › Vulnerabilities
CVE-2026-76438: Cisco BroadWorks CommPilot Application Software Authorization Bypass Vulnerability
- Severity: medium (CVSS 6.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.6% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-09-16 · updated 2026-09-18
- Weakness: CWE-863
Description
A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker with low privileges to alter configurations on an affected device. This vulnerability is due to missing authorization checks. An attacker could exploit this vulnerability by sending a crafted HTTP request. A successful exploit could allow the attacker to alter configurations on select pages.
Affected products
- Cisco BroadWorks: 22.0 ap347303, 22.0, 24.0 ap374691, 24.0 ap379346, 24.0 ap377723, 24.0 ap376842 (+1994)
References
Get alerted when CVE-2026-76438 or the next vulnerability affects your stack